Virtualization event processing in a layered virtualization architecture

ABSTRACT

Embodiments of apparatuses and methods for processing virtualization events in a layered virtualization architecture are disclosed. In one embodiment, an apparatus includes a event logic and evaluation logic. The event logic is to recognize a virtualization event. The evaluation logic is to determine whether to transfer control from a child guest to a parent guest in response to the virtualization event.

CROSS-REFERENCE TO RELATED APPLICATION

This application is a continuation of U.S. patent application Ser. No.11/191,827, which was filed on Jul. 27, 2005.

BACKGROUND

1. Field

The present disclosure pertains to the field of data processing, andmore particularly, to the field of virtualizing resources in dataprocessing apparatuses.

2. Description of Related Art

Generally, the concept of virtualization of resources in data processingapparatuses allows multiple instances of one or more operating systems(each, an “OS”) to run on a single data processing apparatus, eventhough each OS is designed to have complete, direct control over theapparatus and its resources. Virtualization is typically implemented byusing software (e.g., a virtual machine monitor, or a “VMM”) to presentto each OS a “virtual machine” (a “VM”) having virtual resources thatthe OS may completely and directly control, while the VMM maintains asystem environment for implementing virtualization policies such assharing and/or allocating the physical resources among the VMs (the“virtualization environment”). Each OS, and any other software, thatruns on a VM, unaware of the virtualization environment, is referred toas a “guest” or as “guest software,” while a “host” or “host software”is software, such as a VMM, that runs outside of, and may or may not beaware of, the virtualization environment.

A processor in a data processing apparatus may support virtualization,for example, by operating in two modes—a “root” mode in which softwareruns directly on the hardware, outside of any virtualizationenvironment, and a “non-root” mode in which software runs at itsintended privilege level, but within a virtualization environment hostedby a VMM running in root mode. In the virtualization environment,certain events, operations, and situations, such as external interruptsor attempts to access privileged registers or resources, may be“intercepted,” i.e., cause the processor to exit the virtualizationenvironment so that the VMM may operate, for example, to implementvirtualization policies. The processor may support instructions forestablishing, entering, exiting, and maintaining a virtualizationenvironment, and may include register bits or other structures thatindicate or control virtualization capabilities of the processor.

BRIEF DESCRIPTION OF THE FIGURES

The present invention is illustrated by way of example and notlimitation in the accompanying figures.

FIG. 1 illustrates a layered virtualization architecture in which anembodiment of the present invention may operate.

FIG. 2 illustrates the guest hierarchy of a VMM in a layeredvirtualization architecture.

FIG. 3 illustrates a method for processing top-down virtualizationevents according to an embodiment of the present invention.

FIG. 4 illustrates a method for processing bottom up virtualizationevents according to an embodiment of the present invention.

DETAILED DESCRIPTION

Embodiments of apparatuses and methods for processing virtualizationevents in a layered virtualization environment are described. In thefollowing description, numerous specific details, such as component andsystem configurations, may be set forth in order to provide a morethorough understanding of the present invention. It will be appreciated,however, by one skilled in the art, that the invention may be practicedwithout such specific details. Additionally, some well known structures,circuits, and the like have not been shown in detail, to avoidunnecessarily obscuring the present invention.

FIG. 1 illustrates layered virtualization architecture 100, in which anembodiment of the present invention may operate. In FIG. 1, bareplatform hardware 110 may be any data processing apparatus capable ofexecuting any OS or VMM software. For example, bare platform hardwaremay be that of a personal computer, mainframe computer, portablecomputer, handheld device, set-top box, or any other computing system.

Bare platform hardware 110 includes processor 120 and memory 130.Processor 120 may be any type of processor, including a general purposemicroprocessor, such as a processor in the Pentium® Processor Family,the Itanium® Processor Family, or other processor family from IntelCorporation, or another processor from another company, or a digitalsignal processor or microcontroller. Although FIG. 1 shows only one suchprocessor 120, bare platform hardware 110 may include any number ofprocessors. Memory 130 may be static or dynamic random access memory,semiconductor-based read only or flash memory, magnetic or optical diskmemory, any other type of medium readable by processor 120, or anycombination of such mediums. Bare platform hardware 110 may also includeany number of input/output or other devices.

In this embodiment, VMM 140 is a “root mode host” because it runs inroot mode on processor 120. VMM 140 may be any software, firmware, orhardware host installed to run on, or accessible to, bare platformhardware 110, to present VMs, i.e., abstractions of bare platformhardware 110, to guests, or to otherwise create VMs, manage VMs, andimplement virtualization policies within a virtualization environmentsupported by virtualization architecture 100. In other embodiments, aroot mode host may be any monitor, hypervisor, OS, or other software,firmware, or hardware capable of controlling bare platform hardware 110.

A guest may be any OS, any VMM, including another instance of VMM 140,any hypervisor, or any application or other software. Each guest expectsto access physical resources, such as processor and platform registers,memory, and input/output devices, of bare platform hardware 110,according to the architecture of the processor and the platformpresented in the VM. FIG. 1 shows VMs 150, 160, 170, and 180, with guestOS 152 and guest applications 154 and 155 installed to run on VM 150,guest VMM 162 installed to run on VM 160, guest OS 172 installed to runon VM 170, and guest OS 182 installed to run on VM 180. In thisembodiment, all guests run in non-root mode. Although FIG. 1 shows fourVMs and six guests, any number of VMs may be created and any number ofguests may be installed to run on each VM within the scope of thepresent invention.

Virtualization architecture 100 is “layered” or “recursive” because itallows one VMM, for example, VMM 140, to host another VMM, for example,VMM 162, as a guest. In layered virtualization architecture 100, VMM 140is the host of the virtualization environment including VMs 150 and 160,and is not a guest in any virtualization environment because it isinstalled to run on bare platform hardware 110 with no “intervening”monitor between it and bare platform hardware 110. An “intervening”monitor is a monitor, such as VMM 162, that hosts a guest, such as guestOS 172, but is also a guest itself. VMM 162 is the host of thevirtualization environment including VMs 170 and 180, but is also aguest in the virtualization environment hosted by VMM 140. Anintervening monitor (e.g., VMM 162) is referred to herein as a parentguest, because it may function as both a parent to another VM (orhierarchy of VMs) and as a guest of an underlying VMM (e.g., VMM 140 isa parent of VMM 162 which is a parent to guests 172 and 182).

A monitor, such as VMM 140, is referred to as the “parent” of a guest,such as OS 152, guest application 154, guest application 155, and guestVMM 162, if there are no intervening monitors between it and the guest.The guest is referred to as the “child” of that monitor. A guest may beboth a child and a parent. For example, guest VMM 162 is a child of VMM140 and the parent of guest OS 172 and guest OS 182.

A resource that can be accessed by a guest may either be classified as a“privileged” or a “non-privileged” resource. For a privileged resource,a host (e.g., VMM 140) facilitates the functionality desired by theguest while retaining ultimate control over the resource. Non-privilegedresources do not need to be controlled by the host and may be accesseddirectly by a guest.

Furthermore, each guest OS expects to handle various events such asexceptions (e.g., page faults, and general protection faults),interrupts (e.g., hardware interrupts and software interrupts), andplatform events (e.g., initialization and system management interrupts).These exceptions, interrupts, and platform events are referred tocollectively and individually as “events” herein. Some of these eventsare “privileged” because they must be handled by a host to ensure properoperation of VMs, protection of the host from guests, and protection ofguests from each other.

At any given time, processor 120 may be executing instructions from VMM140 or any guest, thus VMM 140 or the guest may be active and runningon, or in control of, processor 120. When a privileged event occurs or aguest attempts to access a privileged resource, control may betransferred from the guest to VMM 140. The transfer of control from aguest to a host is referred to as a “VM exit” herein. After handling theevent or facilitating the access to the resource appropriately, VMM 140may return control to a guest. The transfer of control from a host to aguest is referred to as a “VM entry” herein.

In addition to a VM exit transferring control from a guest to a rootmode host, as described above, embodiments of the present invention alsoprovide for a VM exit to transfer control from a guest to a non-rootmode host, such as an intervening monitor. In embodiments of the presentinvention, virtualization events (i.e., anything that may cause a VMexit) may be classified as “top-down” or “bottom-up” virtualizationevents.

A “top-down” virtualization event is one in which the determination ofwhich host receives control in a VM exit is performed by starting withthe parent of the active guest and proceeds towards the root mode host.Top-down virtualization events may be virtualization events thatoriginate through actions of the active guest, including the executionof virtualized instructions such as the CPUID instruction in theinstruction set architecture of a processor in the Pentium® ProcessorFamily. In one embodiment, the root mode host may be provided with theability to bypass top-down virtualization event processing for one ormore virtualization events. In such an embodiment, the virtualizationevent may cause a VM exit to the root mode host even though it would behandled as a top-down virtualization event with regard to allintervening VMMs.

A “bottom-up” virtualization event is one in which the determination ofwhich host receives control in a VM exit is performed in the oppositedirection, e.g., from the root mode host towards the parent of theactive guest. Bottom-up virtualization events may be virtualizationevents that originate by actions of the underlying platform, e.g.,hardware interrupts and system management interrupts. In one embodiment,processor exceptions are treated as bottom-up virtualization events. Forexample, the occurrence of a page fault exception during execution of anactive guest would be evaluated in a bottom-up fashion. This bottom-upprocessing may apply to all processor exceptions or a subset thereofAdditionally, in one embodiment, a VMM has the ability to inject events(e.g., interrupts or exceptions) into its guests or otherwise inducesuch events. In such an embodiment, the determination of which hostreceives control in a VM exit may be performed by starting from abovethe VMM that induced the virtualization event, instead of from the rootmode host.

in the embodiment of FIG. 1, processor 120 controls the operation of VMsaccording to data stored in virtual machine control structure (“VMCS”)132. VMCS 132 is a structure that may contain state of a guest orguests, state of VMM 140, execution control information indicating howVMM 140 is to control operation of a guest or guests, informationregarding VM exits and VM entries, any other such information. Processor120 reads information from VMCS 132 to determine the executionenvironment of a VM and constrain its behavior. In this embodiment, VMCS132 is stored in memory 130. VMCS 132 may be divided into multiplestructures, each corresponding to one host or one guest, where each maybe considered an independent VMCS.

The “guest hierarchy” of a VMM is the stack of software installed to runwithin the virtualization environment or environments supported by theVMM. The present invention may be embodied in a virtualizationarchitecture in which guest hierarchies include chains of pointersbetween VMCSs. These pointers are referred to as “parent pointers” whenpointing from the VMCS of a child to the VMCS of a parent, and as “childpointers” when pointing from the VMCS of a parent to the VMCS of achild.

FIG. 2 illustrates the guest hierarchy of VMM 220, which is installed asa root mode host on bare platform hardware 210. VMCS 221 is a controlstructure for VMM 220, although a root mode host may operate without acontrol structure. Guest 230 is a child of VMM 220, controlled by VMCS231. Therefore, parent pointer (“PP”) 232 points to VMCS 221. Guest 240is also a child of VMM 220, controlled by VMCS 241. Therefore, parentpointer 242 also points to VMCS 221.

Guest 240 is itself a VMM, with two children, guests 250 and 260, eachwith a VMCS, 251 and 262, respectively. Both parent pointer 252 andparent pointer 262 point to VMCS 241.

The VMCS of a guest that is active, or running, is pointed to by thechild pointer of its parent's VMCS. Therefore, FIG. 2 shows childpointer 243 pointing to VMCS 251 to indicate that guest 250 is active.Similarly, the VMCS of a guest with an active child pointer, as opposedto a null child pointer, is pointed to by the child pointer of itsparent's VMCS. Therefore, FIG. 2 shows child pointer 223 pointing toVMCS 241. Consequently, a chain of parent pointers links the VMCS of anactive guest through the VMCSs of any intervening monitors to the VMCSof a root mode host, and a chain of child pointers links the VMCS of aroot mode host through the VMCSs of any intervening monitors to the VMCSof an active guest.

The VMCS 221 is referred to herein as the “root VMCS”. In an embodiment,there is no root VMS, as described above. In an embodiment whichincludes a root VMCS, the processing hardware may maintain a pointer tothe root VMCS in an internal register or other data structure. The VMCSof a guest that is active, as described above, is referred to herein asthe current controlling VMCS. For example, while guest 250 is active,VMCS 251 is the current controlling VMCS. In an embodiment, theprocessing hardware may maintain a pointer to the current controllingVMCS in an internal register or other data structure.

If a VMCS is not a parent VMCS, its child pointer, such as childpointers 233, 253, and 263, may be a null pointer. If a VMCS does nothave a parent, for example, if it is a root-mode VMCS, its parentpointer, such as parent pointer 222, may be a null pointer.Alternatively, these pointers may be omitted. In some embodiments, the“null” value for a null VMCS pointer may be zero. In other embodiments,other values may be interpreted as “null”, For example, in oneembodiment with 32-bit addresses, the value 0xffffffff may beinterpreted as null.

Each guest's VMCS in FIG. 2 includes a bit, a field, or another datastructure (an “event bit”) to indicate whether that guest's parent wantscontrol if a particular virtualization event occurs. Each VMCS mayinclude any number of such bits to correspond to any number ofvirtualization events. FIG. 2 shows event bits 264, 254, 244, and 234.

Returning to FIG. 1, processor 120 includes control logic 121 to supportvirtualization, including virtualization event processing in a layeredvirtualization architecture. Control logic 121 may be implemented inmicrocode, programmable logic, hard-coded logic, or any other form ofcontrol logic within processor 120. In other embodiments, control logic121 may be implemented in any form of hardware, software, or firmware,such as a processor abstraction layer, within a processor or within anydevice accessible or medium readable by a processor, such as memory 130.

Control logic 121 includes event logic 122, evaluation logic 123, andexit logic 124. Event logic 122 may be divided into top-down event logic125 and bottom-up event logic 126. Evaluation logic 123 may be dividedinto top-down evaluation logic 127 and bottom-up evaluation logic 128.Control logic 121 causes processor 120 to execute method embodiments ofthe present invention, such as the method embodiments illustrated inFIGS. 3 and 4, for example, by causing processor 120 to include theexecution of one or more micro-operations, e.g., to supportvirtualization, in its response to virtualization instructions, otherinstructions from a host or guest, or virtualization events.

FIG. 3 illustrates a method for processing top-down virtualizationevents according to an embodiment of the present invention. In Figurebox 310, top-down event logic 125 recognizes a top-down virtualizationevent. For example, a guest may execute a CPUID instruction, and thetop-down event logic may be a decoder that decodes the instruction.

In boxes 321 to 325, top-down evaluation logic 127 determines if a VMexit is to occur in response to the top-down virtualization event, andif so, which host is to receive control. For example, top-downevaluation logic 127 may be microcode within the processor's microcodefor the CPUID instruction.

In box 321, the VMCS of the active guest is identified as the childVMCS. In box 322, a determination is made as to whether the parent ofthat child wants control, for example, by checking the child VMCS todetermine if the event bit for a CPUID instruction virtualization eventis set. If it does, then, in box 330, exit logic 124 causes a VM exit tooccur and control is transferred to that parent. For example, if thereis a VM exit after only one pass through box 322, then the parent of theactive guest receives control.

If the determination in box 322 is that the parent does not wantcontrol, then, in box 323, a determination is made as to whether thatparent is the root mode host, for example, by determining if the parentpointer of the parent VMCS is a null pointer. If it is, then no VM exitoccurs and, in box 324, the active guest handles the virtualizationevent itself e.g., by allowing the CPUID instruction to executenormally. If the determination in box 323 is that the parent is not theroot mode host, then, in box 325, the parent pointer of the child VMCSis followed to identify the parent VMCS as the new child VMCS, replacingthe last child VMCS. Then, box 322 is repeated.

The following pseudo code also illustrates a method for processingtop-down virtualization events according to an embodiment of the presentinvention. In the embodiment depicted in this pseudo code, a root VMCSis present.

Detect virtualization event “<<event>>” if (controlling-VMCS !=root-VMCS) { // The root-VMM is not currently active. // Walk throughall ancestors of the currently operating VM, // starting with thenearest relative (the parent VMM), checking // each until one is foundthat wants control when <<event>> occurs. // Start with the currentcontrolling-VMCS walk = controlling-VMCS; do { // Check if this VMMwants to gain control on this event if (controls in walk indicate a VMexit is required due to <<event>>) { // This VMM level wants a VM-exiton this event. Generate the // VM-exit, using information from the walkVMCS and storing guest // state in the walk VMCS. VM-exit (walk); } //Follow the parent pointer chain to go to the next older VMM walk =walk−>parent-VMCS; } while (walk != root-VMCS); } // Either (1) the rootVMM is currently operating, or (2) no VMM wants // control on thisevent. The currently // operating SW handles the event itself (i.e,allow the // instruction to execute normally). ...

FIG. 4 illustrates a method for processing top-down virtualizationevents according to an embodiment of the present invention. In box 410,bottom-up event logic 126 recognizes a bottom-up virtualization event.In boxes 421 to 425, bottom-up evaluation logic 128 determines if a VMexit is to occur in response to the bottom-up virtualization event, andif so, which host is to receive control.

In box 421, the VMCS of the host associated with the bottom-upvirtualization event is identified as the parent VMCS. For example, ifthe bottom-up virtualization event is an interrupt generated byhardware, the root mode host may be identified as the parent.Alternatively, if the bottom-up virtualization event (e.g., anexception, interrupt or other virtualization event) is induced orinjected by a host, that host may be identified as the parent.

In box 422, the child pointer of the parent VMCS is followed to identifythe child VMCS. In box 423, a determination is made as to whether theparent wants control, for example, by checking the child VMCS todetermine if the event bit for a particular interrupt or type ofinterrupt is set. If it is, then, in box 430, exit logic 124 causes a VMexit to occur and control is transferred to that parent. For example, ifthe root mode host is identified as the parent in box 421, and there isa VM exit after only one pass through box 423, then the root mode hostreceives control.

If the determination in box 423 is that the parent does not wantcontrol, then, in box 424, a determination is made as to whether thechild is the active guest, for example, by determining if the childpointer of the child VMCS is a null pointer. If it is, then no VM exitoccurs and, in box 425, the active guest handles the virtualizationevent itself. If the determination in box 424 is that the child is notthe active guest, then, in box 426, the child VMCS is identified as thenew parent VMCS, replacing the last parent VMCS. Then, box 422 isrepeated.

The following pseudo code also illustrates a method for processingbottom-up virtualization events according to an embodiment of thepresent invention. In the embodiment depicted in this pseudo code, aroot VMCS is present.

Detect bottom-up virtualization event “<<event>>” if (controliing-VMCSpp!= root-VMCS) { // The root-VMM is not currently active. // Walk throughall VMMs which are ancestors of the currently // operating VM, startingat the VMCS pointed to by the child pointer of the root-VMCS, //checking each until one is found that wants control when // <<event>>occurs. // Start with the lowest controlling VMCS above the root-VMCS.walk is // initialized to the root-VMCS and it will be bumped at the topof // the while loop, below. // // Stop searching after we have checkedthe current controlling VMCS. walk = root-VMCS; do { // Go to the nextyounger VMM (i.e., closer to the currently // operating guest). Notethat the root-VMM's // controlling VMCS is NOT checked. walk =walk−>child-VMCS; // Check if this VMM wants to gain control on thisevent if (walk indicates VM exit required for <<event>>) { // This VMMlevel wants a VM-exit on this event. VM-exit(walk); } } while (walk !=current controlling-VMCS); } // Either (1) the root-VMM is running or(2) no VMM wants control on this event. // The currently-operating SWmust handle it itself ...

Within the scope of the present invention, the methods illustrated inFIGS. 3 and 4 may be performed in different orders, performed withillustrated boxes omitted, performed with additional boxes added, orperformed with a combination of reordered, omitted, or additional boxes.For example, the methods of FIGS. 3 and 4 may be combined with anadditional box to determine whether a recognized virtualization event isa top-down or a bottom-up virtualization event. For another example, inbox 430 of FIG. 4, a VM exit may not occur if the event is a hardwareinterrupt and a control bit indicates that the hardware interrupt isblocked, in which case the active guest may continue to execute whilethe hardware interrupt is held pending.

Some portions of the above descriptions have been presented in terms ofalgorithms and symbolic representations of operations on data bitswithin a computer system's registers or memory. These algorithmicdescriptions and representations are the means used by those skilled inthe data processing arts to effectively convey the substance of theirwork to others skilled in the art. An algorithm is here, and generally,conceived to be a self-consistent sequence of operations leading to adesired result. The operations are those requiring physicalmanipulations of physical quantities. Usually, though not necessarily,these quantities take the form of electrical or magnetic signals capableof being stored, transferred, combined, compared, and otherwisemanipulated. It may have proven convenient at times, principally forreasons of common usage, to refer to these signals as bits, values,elements, symbols, characters, terms, numbers, or the like.

It should be borne in mind, however, that all of these and similar termsare to be associated with the appropriate physical quantities and aremerely convenient labels applied to these quantities. Unlessspecifically stated otherwise, it is to be appreciated that throughoutthe present invention, discussions utilizing terms such as “processing”or “computing” or “calculating” or “determining” or the like, may referto the action and processes of a computer system, or similar electroniccomputing device, that manipulates and transforms data represented asphysical (electronic) quantities within the computer system's registersand memories into other data similarly represented as physicalquantities within the computer-system memories or registers or othersuch information storage, transmission or display devices.

Furthermore, processor 120, or any other component or portion of acomponent designed according to an embodiment of the present invention,may be designed in various stages, from creation to simulation tofabrication. Data representing a design may represent the design in anumber of manners. First, as is useful in simulations, the hardware maybe represented using a hardware description language or anotherfunctional description language. Additionally or alternatively, acircuit level model with logic and/or transistor gates may be producedat some stages of the design process. Furthermore, most designs, at somestage, reach a level where they may be modeled with data representingthe physical placement of various devices. In the case whereconventional semiconductor fabrication techniques are used, the datarepresenting the device placement model may be the data specifying thepresence or absence of various features on different mask layers formasks used to produce an integrated circuit.

In any representation of the design, the data may be stored in any formof a machine-readable medium. An optical or electrical wave modulated orotherwise generated to transmit such information, a memory, or amagnetic or optical storage medium, much as a disc, may be themachine-readable medium. Any of these media may “carry” or “indicate”the design, or other information used in an embodiment of the presentinvention, such as the instructions in an error recovery routine. Whenan electrical carrier wave indicating or carrying the information istransmitted, to the extent that copying, buffering, or re-transmissionof the electrical signal is performed, a new copy is made. Thus, theactions of a communication provider or a network provider may constitutethe making of copies of an article, e.g., a carrier wave, embodyingtechniques of the present invention.

Thus, apparatuses and methods for processing virtualization events in alayered virtualization architecture have been disclosed. While certainembodiments have been described, and shown in the accompanying drawings,it is to be understood that such embodiments are merely illustrative andnot restrictive of the broad invention, and that this invention not belimited to the specific constructions and arrangements shown anddescribed, since various other modifications may occur to thoseordinarily skilled in the art upon studying this disclosure. In an areaof technology such as this, where growth is fast and furtheradvancements are not easily foreseen, the disclosed embodiments may bereadily modifiable in arrangement and detail as facilitated by enablingtechnological advancements without departing from the principles of thepresent disclosure or the scope of the accompanying claims.

1. An apparatus comprising: event logic to recognize a virtualizationevent; and evaluation logic to determine whether to transfer control ofthe apparatus from a child guest to a parent guest in response to thevirtualization event.
 2. The apparatus of claim 1, wherein theevaluation logic is also to determine whether to transfer control fromthe child guest to a host of the parent guest if the evaluation logicdetermines not to transfer control from the child guest to the parentguest.
 3. The apparatus of claim 1, wherein the evaluation logic is alsoto determine whether to transfer control from the child guest to a rootmode host if the evaluation logic determines not to transfer controlfrom the child guest to the parent guest.
 4. The apparatus of claim 1,wherein the evaluation logic is also to determine whether to transfercontrol from the child guest to a host of the parent guest beforedetermining whether to transfer control from the child guest to theparent guest.
 5. The apparatus of claim 1, wherein: the event logic isalso to recognize a virtualization event induced by a parent monitor;and the evaluation logic is also to determine whether to transfercontrol from the child guest to a child of the parent monitor beforedetermining whether to transfer control from the child guest to theparent guest.
 6. The apparatus of claim 1, wherein the evaluation logicis also to determine whether to transfer control from the child guest toa root mode host before determining whether to transfer control from thechild guest to the parent guest.
 7. The apparatus of claim 1, whereinthe evaluation logic is also to check a virtual machine controlstructure to determine whether to transfer control.
 8. The apparatus ofclaim 1, wherein the parent guest is a virtual machine monitor.
 9. Anapparatus comprising: top-down event logic to recognize a top-downvirtualization event; bottom-up event logic to recognize a bottom-upvirtualization event; top-down evaluation logic to determine whether totransfer control of the apparatus from a child guest to a parent guestin response to the top-down virtualization event; and bottom-upevaluation logic to determine whether to transfer control of theapparatus from the child guest to a host of the parent guest in responseto the bottom-up virtualization event.
 10. The apparatus of claim 9,wherein: the top-down evaluation logic is also to determine whether totransfer control from the child guest to a host of the parent guest ifthe top-down evaluation logic determines not to transfer control fromthe child guest to the parent guest; and the bottom-up evaluation logicis also to determine whether to transfer control from the child guest tothe parent guest if the bottom-up evaluation logic determines not totransfer control from the child guest to the host of the parent guest.11. A method comprising: recognizing a virtualization event; anddetermining whether to transfer control from a child guest to a parentguest in response to the virtualization event.
 12. The method of claim11, further comprising determining whether to transfer control from thechild guest to a host of the parent guest if control is not transferredfrom the child guest to the parent guest.
 13. The method of claim 11,further comprising determining whether to transfer control from thechild guest to a root mode host if control is not transferred from thechild guest to the parent guest.
 14. The method of claim 11, furthercomprising determining whether to transfer control from the child guestto a host of the parent guest before determining whether to transfercontrol from the child guest to the parent guest.
 15. The method ofclaim 11, wherein the virtualization event is induced by a parentmonitor, further comprising determining whether to transfer control fromthe child guest to a child of the parent monitor before determiningwhether to transfer control from the child guest to the parent guest.16. The method of claim 11, further comprising determining whether totransfer control from the child guest to a root mode host beforedetermining whether to transfer control from the child guest to theparent guest.
 17. The method of claim 11, further comprising checking avirtual machine control structure for an indication of whether theparent guest is to receive control.
 18. The method of claim 11, whereinthe virtualization event is one of a top-down event and a bottom-upevent, further comprising: checking the child guest's control structurebefore checking the parent guest's control structure if thevirtualization event is a top-down event; and checking the parentguest's control structure before checking the child guest's controlstructure if the virtualization event is a bottom-up event.
 19. A systemcomprising: a memory to store a control structure for a virtual machine;and a processor including: event logic to recognize a virtualizationevent; and evaluation logic to determine, based on an indicator in thecontrol structure, whether to transfer control of the processor from achild guest to a parent guest in response to the virtualization event.20. The system of claim 19, wherein the evaluation logic is also todetermine whether to transfer control from the child guest to a host ofthe parent guest if the evaluation logic determines not to transfercontrol from the child guest to the parent guest.
 21. The system ofclaim 19, wherein the evaluation logic is also to determine whether totransfer control from the child guest to a host of the parent guestbefore determining whether to transfer control from the child guest tothe parent guest.
 22. A system comprising: a dynamic random accessmemory to store a control structure for a virtual machine; and aprocessor including: event logic to recognize a virtualization event;and evaluation logic to determine, based on an indicator in the controlstructure, whether to transfer control of the processor from a childguest to a parent guest in response to the virtualization event.
 23. Aprocessor comprising: event logic to recognize a virtualization eventwhen a guest is running in non-root mode, where the virtualization eventis one of a top-down event or a bottom-up event; evaluation logic torespond to the virtualization event by determining whether control is tobe transferred from the guest to one of an intervening monitor and aroot mode monitor, where the determination is made by checking theguest's control structure first if the virtualization event is atop-down event and by checking the intervening monitor's controlstructure first if the virtualization event is a bottom-up event; andexit logic to cause the processor to transition control from the guestto one of the intervening monitor and the root mode monitor based on thedetermination.